Baseline
- A Web App Manifest with the following properties referenced: name, short_name, start_url, display, and icon
- Can run without extra browser chrome (e.g., the URL bar, potentially dangerous perm)
- Apps must be served over TLS (green padlock / no active mixed content) to prevent hijacking by captive portals (and worse)